Sysmon - Install
Summary
Installs Sysmon application on Windows machines.
Sample Run
Dependencies
Task Creation
Script Details
Step 1
Navigate to Automation ➞ Tasks
Step 2
Create a new Script Editor style task by choosing the Script Editor option from the Add dropdown menu
The New Script page will appear on clicking the Script Editor button:
Step 3
Fill in the following details in the Description section:
- Name:
Sysmon - Install - Description:
Installs Sysmon application on windows machines. - Category:
Application
Script Editor
Click the Add Row button in the Script Editor section to start creating the script
A blank function will appear:
Row 1: Function: Set Pre-defined Variable
This sets the variable CustomConfigFile with the value of a custom field Sysmon ConfigFile DownloadURL
Row 2 Function: PowerShell Script
Search and select the PowerShell Script function.
The following function will pop up on the screen:
Paste in the following PowerShell script and set the Expected time of script execution in seconds to 600 seconds. Click the Save button.
Row 3 Function: Script Log
Add a new row by clicking the Add Row button.
A blank function will appear.
Search and select the Script Log function.
In the script log message, simply type %output% and click the Save button.
Save Task
Click the Save button at the top-right corner of the screen to save the script.
Completed Task
Output
- Script Logs
Schedule Task
Task Details
- Name:
Sysmon - Install - Description:
Installs Sysmon application on windows machines. - Category:
Application
Schedule
- Schedule Type:
Schedule - Timezone:
Local Machine Time - Start:
<Current Date> - Trigger:
TimeAt<Current Time> - Recurrence:
Every Day
Targeted Resource
Device Group: Sysmon Deployment
Completed Scheduled Task
Changelog
2026-03-26
- Initial version of the document